On Feb 9, 2012, at 7:35 PM, Nico Williams wrote: > The only thing missing, of course, is web user authentication > technologies that scale to the Internet and have channel binding > support. > > I would like to see web userauth technologies that have support for > channel binding. > > If such technologies were in widespread use then MITM CAs would be > useless, therefore rare. > > Is it too late to work on this? The folks over at the ABFAB WG don't > seem to think so, but I want more options than just Project Moonshot > and Kerberos.
This thread looks to me like it's more appropriate for the http-auth mailing list. The "charter" of therightkey is pretty specific in that it talks about PKI authentication only. This will be a one-time-only cross-post. Yoav _______________________________________________ therightkey mailing list [email protected] https://www.ietf.org/mailman/listinfo/therightkey
